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Several new classes of Boolean functions with few 

Walsh transform values 

Guangkui Xu, Xiwang Cao, and Shangding Xu 


Abstract —In this paper, several new classes of Boolean func¬ 
tions with few Walsh transform values, including bent, semi-bent 
and five-valued functions, are obtained by adding the product of 
two or three linear functions to some known bent functions. Nu¬ 
merical results show that the proposed class contains cubic bent 
functions that are affinely inequivalent to all known quadratic 
ones. Meanwhile, we determine the distribution of the Walsh 
spectrum of five-valued functions constructed in this paper. 

Index Terms —Boolean function; Bent function; Semi-bent 
function; five-valued function; Walsh transform 

I. Introduction 

OR a positive integer n and a prime p, let Fpn be 
the finite field with p" elements, F*„ = Fpn \ {0}. 
A Boolean function is a mapping from F 2 n to F 2 . The 
Walsh transform is a powerful tool to investigate cryptographic 
properties of Boolean functions which have wide applications 
in cryptography and coding theory. An interesting problem is 
to find Boolean functions with few Walsh transform values and 
determine their distributions. Bent functions, introduced by 
[1] Rothaus, are Boolean functions with two Walsh transform 
values and achieve the maximum Hamming distance to all 
affine Boolean functions. Such functions have been extensively 
studied because of their important applications in coding 
theory [2], [3], cryptography [4], sequence designs [5] and 
graph theory [6], [7]. Notice that bent functions exist only 
for an even number of variables and can not be balanced. In 
1985, Kumar, Scholtz and Welch extended Rothaus’ definition 
to the case of an arbitrary prime p [8]. Complete classification 
of bent functions seems elusive even in the binary case. How¬ 
ever, a number of recent interesting results on bent functions 
have been found through primary constructions and secondary 
constructions (see [9], [10], [11], [12], [13], [14], [15], [16], 
[17], [18], [19], [20], [21], [22], and references therein). 

As a particular case of the so-called plateaued Boolean 
functions [23], semi-bent functions are an important kind of 
Boolean functions with three Walsh transform values. The 
term of semi-bent function introduced by Chee et al. [24]. 
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Semi-bent functions investigated under the name of three¬ 
valued almost optimal Boolean functions in [2], i.e., they have 
the highest possible nonlinearity in three-valued functions. 
They are also nice combinatorial objects and have wide 
applications in cryptography and coding theory. A lot of 
research has been devoted to finding new families of semi¬ 
bent functions (see [25], [12], [26], [16], [27], [28], [29] and 
the references therein). However, there is only a few known 
constructions of semi-bent functions. In general, it is difficult 
to characterize all functions with few Walsh transform values. 

For any positive integers n, and k dividing n, the trace 
function from Fpr. to Fpfc, denoted by Tr^, is the mapping 
defined as; 

U OU T3 — k 

Tr^ (x) = X + + x^ + ■ ■ ■ + x^ 

71 — 1 ^ 

For k = 1, Tr"(a;) = x^ is called the absolute trace 

2—0 

function. Recently, using a theorem proved by Carlet [30, The¬ 
orem 3], Mesnager [31] provided some primary and secondary 
constructions of bent functions and gave corresponding dual 
functions of these constructions. By means of the second order 
derivative of the duals of known bent functions, she obtained 
two new infinite families of bent functions with the forms 

f{x) = Tr™(A:r2’"+i) + Tr^ (uxjTr^ (ux) (1) 

and 

-b Tr"(ua;)Tr"(r;a;) (2) 

over F 2 n, where n = 2m, A £ F^m and u,v £ F^n. 
She showed that the function defined by (1) is bent when 
Tr" v) = 0 and the function defined by (2) is bent 

when u, u £ F^m. 

The aim of this paper is to present several classes of 
functions with few Walsh transform values. Inspired by the 
work of [31], we present several new classes of bent functions 
by adding the product of three or two linear functions to 
some known bent functions. Computer experiments show that 
we can obtain some cubic bent functions. Meanwhile, several 
new classes of semi-bent and five-valued functions are also 
obtained. The proofs of our main results are based on the 
study of the Walsh transform, which are different from the 
ones used in [31]. 

The paper is organized as follows. In Section II, we give 
some notation and recall the necessary background. In Section 
III, we present some new Boolean functions with few Walsh 



/(x) =Trr(x2 


+ Trj* 
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transfoim values from Kasami function and Gold function. A 
new family of bent functions via Niho exponents is presented 
in Section IV and two new families of functions with few 
Walsh transform values via Maiorana-McFarlands class are 
provided in Section V. 

II. Preliminaries 

By viewing each x = xi^i + X 2 i 2 H-f S F 2 " as a 

vector (xi, 0 : 2 , ■ • ■ , x„) G F 2 where {^i, • • ■ , ^n} is a basis of 
F 2 " over F 2 , we identify F 2 (the n-dimensional vector space 
over F 2 ) with F 2 n, and then every function / : F 2 n —>■ F 2 is 
equivalent to a Boolean function. For x,y € F 2 n, the inner 
product is defined as x ■ y = Tr"(xt/). It is well known that 
every nonzero Boolean function defined on F 2 n can be written 
in the form of f{x) = + ^(1 + 

where r„ is a set of integers obtained by choosing one element 
in each cyclotomic coset of 2 modulo 2 " — 1, o{j) is the size 
of the cyclotomic coset containing j, aj G ¥ 20 ( 3 ) and e = 
wt(f)(mod 2 ), where wt(f) is the cardinality of its support 
supp := {x G F 2 n I f(x) = 1}. The algebraic degree of / is 
equal to the maximum 2 -weight of an exponent j for which 
Oj ^ 0 if e = 0 and to n if e = 1 . 

The Walsh transform of a Boolean function / : F 2 ™ —>■ F 2 
is the function Xf : F 2 '> —>■ Z defined by 

X/(«)= ^ (-l)^(")+^”(“"),aGF 2 .. 

xG¥2n 

The values x/(a); a G F 2 »i are called the Walsh coefficients of 
/. The Walsh spectrum of a Boolean function / is the multiset 
{Xf(a),a G F 2 n}. A Boolean function / is said to be balanced 
if x/( 0 )= 0 . 

Definition 1: [1] A Boolean function / is said to be bent 
if lx/(o)l = for all a G F 2 n. 

In view of Parseval’s equation this definition implies that 
bent functions exist only for an even number of variables. 
For a bent function with n variables, its dual is the Boolean 
function / defined by x/(q) = 2”/^(—It is easy to 
verify that the dual of / is again bent. Thus, Boolean bent 
functions occur in pair. However, determining the dual of a 
given bent function is not an easy thing. A bent function is said 
to be self-dual (resp. anti-self-dual) if / = / (resp. / = f-\-l). 
For more study on self-dual and anti-self-dual bent functions 
can be founded in [30], [32], [31], [33]. 

Definition 2: [24] A Boolean function / is said to be semi¬ 
bent if 

^ f \ ^ f { 0 ; ± 2 ^I, if n is odd 
I { 0 , ± 2 ^+ 1 }, if n is even 

for all a G F 2 n. 

Our constructions can be derived from some known bent 
functions. The following result will be used in the sequel. 

Lemma 1: Let n be a positive integer and u,v,r G FJn. 
Let g(x) be a Boolean function over F 2 ". Define the Boolean 
function f(x) by 

f(x) = g(x) Tr"(Mx)Tr"(ux)Tr"(rx). 


Then, for every a G F 2 n, 

X}{a) =^[3Xg(a) + Xg{a + v) + Xg(a + u) - Xg(a + m -f u) 
+ Xg(a + r) - Xg(a -f r -f v) - Xg(a + r -f m) 

+ Xg(a d-r u-\- u)]. 

In particular, if r = u, then 

Xf(a) = ^IXgia) + Xg{a + u) + Xgia + v) -Xg(a + u + v)]. 


Proof: For i,j G {0,1} and u,v G F^n, define 

= {x G F 2 n|Tr”('ux) = z,Tr”(ux) = j} 

and denote 

and 

^&fi.3) 

For each a G F 2 ", we have 


Xf(a) 

xG ¥271 

_ 'y ^ ^_^^g(a;)-t-Tr[^('ua;)Tr[^(Da:)Tr[^(rx)+Tr[^(aa:) 

xG¥2n 

— ^2 (—+ ^2 (— 
x^T(^q,o) 


— ‘S'(o,o)(a) + 5'(o,i)(a) + 5 '(i,o)(Q') + Q(i,i)(a + 1 ') 

= Xg(«) - 'S'(i.i)(a) + Q{i,i){a + r). (3) 

In the following, we will compute two sums 5'(i i)(a) and 
^( 11 ) (a -f r). Let T(^ij) be defined as above. Clearly, 

Xg(a) = S'(o,o)(o) + 'S'(o,i)(a) + >S'(i,o)(o) + 'S'(i,i)(a). (4) 

Furthermore, we have 

Xg{a + v) 

(^_X)5(a^)+Tri (ax) _ (ax) 

^^"^( 0 , 0 ) ^^^( 0 , 1 ) 

+ E 

^^"^( 1 , 0 ) ^^"^( 1 , 1 ) 


^_2^9(3;)+TrJ(ax) 



— 5'(o_o)(a) — S'(o,i)(a) -f 5'(i o)(a) — 5'(i_i)(a). (5) 

Similarly, 

Xg{a + u) 

= ‘5(0,0) (o) + 5(0,1) (a) — 5(1,0) (a) ~ 5(i,i) (a) (6) 


and 

Xg(a-hu-hv) 

= 5(o,o)(a) — 5(o,i)(a) — 5'(i,o)(a) + S'(i,i)(a). (7) 
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From (4)-(7), we have 


/ 

1 

1 



/ 

5'(0,0)(o) \ 


1 -1 

1 -1 



5'(o,i)(a) 


1 

1 

-1 -1 



5'(i,o)(a) 

V 

1 -1 

-1 1 ^ 


V 

*5(1.1) (a) / 


/ Xs(«) \ 

Xg{a + v) 

Xg{.a + u) 

V Xg{a + u + v) ) 


( 8 ) 


Note that the coefficient matrix of (8) is a Hadamard matrix 
of order 4. Then we have 


elements in F 2 r., the distribution of the Walsh spectrum of 
five-valued function / is given by 


' 0, 

occurs 2” - 2”-i - 2"-3 times 

2™, 

occurs 2"“^ -1- 2™“^ times 

1 

to 

occurs 2"“^ — 2"*“^ times 

2?n+l 

occurs 2"“'^ times 


occurs 2"“^ times. 


If (Tr”(A-V2”‘u),Tr^(A-V2'"u),Tr”(A-iu2”‘^;)) g 
{(1,1,0), (1,0,1), (0,1,1)}, when a runs through all 
elements in F 2 n, the distribution of the Walsh spectrum of 
five-valued function / is given by 


5'(i,i)(a) =^[Xg{a) -Xg{a + v) 

-Xg{a + u)+%{a + u + v)]. (9) 

Substituting a by a -f r in (9), we can get 

Q{iA){a + r) =^[Xs(a + r) - Xg(a + r + v) 

- Xg(a + r + u) + Xg{a + r + u + u)]. 

( 10 ) 

The desired conclusion follows from (3), (9) and (10). 

In particular, if r = u, it is easy to show that 

X/(a) = ^[Xgia)+Xg{a + u) + Xg{a + v)-Xg{a + v + u)]. 


Xf{a) = < 


0 , 

2™, 

- 2 ™, 

_2^+1 


occurs 2” - 2”-i - 2”-3 times 
occurs 2"“^ times 
occurs 2"“^ times 
occurs 2”“^ + 2™“^ times 
occurs 2"“'^ — 2™“^ times. 


Proof: Let g{x) = Tr™(Ax^ For each a € F 2 n, by 
Lemma 1, we have 

X/(a) =^[3Xg(a) + Xg{a + + Xg(a + u) - Xg{a -f u -f u) 

+ Xg{a + r) - Xg{a + r + v) - Xg{a + r + u) 

+ Xg{a -I- r -f M -I- u)] 

= Ai -I-A 2 , 


The proof is completed. □ 

It must be pointed out that f{x) = g{x) + 
Tr”(ua;)Trj (ua;)Tr”(ra;) = ( 7 (a;)-|-Tr"(Mx)Tr"(ua;)Tr"(ua;-|- 
vx) = g{x) when u -f u -f r = 0. In the following, we always 
assume that u + v + r 0. 

III. New infinite families of bent, semi-bent and 

FIVE-VALUED FUNCTIONS FROM MONOMIAL BENT 

functions 

A. New infinite families of bent, semi-bent and five-valued 
functions from Kasami function 

Let n = 2m (m is at least 2) be a positive even integer. 
The Kasami function g{x) = Tr^(Ax^ ■*'^) is bent where 
A S Fernand its dual g is given by g{x) = Tr7*(A“^a;^”*“''^)-|-l 
[31]. In other words, for each a € ¥ 2 ^^, the Walsh coefficient 
Xg{a) is 

Xg(a) = -2-(-l)^r(A-A='"+L. (11) 

In the following result, we will present some new bent and 
five-valued functions by making use of the Kasami function. 

Theorem 1: Let n = 2m be a positive even integer and let 
M, V, r be three distinct pairwise elements in F^™ such that 
u -\- V -\- r f Q. Define the Boolean function / on F 2 n as 

/(x) = Tr™(Ax2'”+i) + Tr”(Mx)Tr”(z;x)Tr^ (rx), 

where A € F^m. If Tr"(A“^u^ v) = Tr"(A“^r^ u) = 
Tr"(A“^?’^ v) = 0, then / is bent. Otherwise, / is five-valued 
and the Walsh spectrum of / is {0, ±2™, ±2™+^}. More¬ 
over, if (Tr”(A-V 2 '"x),Tr”(A-V 2 '”u),Tr”(A-iu 2 '"„)) g 
{(0, 0,1), (1,0, 0), (0,1,0), (1,1,1)}, when a runs through all 


where 

Ai = i[3xg(a)-fXg(a + w) + Xg(a + 'u)-Xg(a + u + t3)] 

and 

^2 = 2 {Xg{a-\-r) -Xg{a-\-r + v)-Xg{a-\-r-\-u) 

+ Xg(a + r + U + u)]. 

Now we use (11) to compute two sums Ai and A 2 respec¬ 
tively. 


Ai = i.(-2™)[3(-l)T>^5"(^“'“'’”^') + (-l)Trr(A-^(a+0^” + ^ 




1 


=_ 2 ™(— 


-1 2 "‘ + l^ 


) 1^3 _|_ (_l)Trr(A (a v-l-av 
_ ^_j^)Tr[^(A“^(a^ v+av^ +v^ u+au^ '^^)) 

Similarly, we have 


) 

)) 




[1 - (-1)^" 

*(A- 

v-\-av^ 

+I_|_.p2 

(_l)Trr(A-F 

:a'" 

u-\-au^ 


u-\-ru^ )) 

(_l)Trr(A-F 

:a'" 

v-\-av^ 



(_l)Trr(A-F 


v-\-rv^ 


u-\-ru^ v+uv"^ ))j 
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To simplify Ai and A 2 , we write ti = Tr™(A“^(r^”’ri + 
rw^™)) = Tr"(A“^r^’"w), t2 = Tr™(A“^(r^”u + = 

Tr"(A“^r^™it) and = Tr™(A“^('u^’"t; + uv'^"')) = 

Tr”(A~^u^ t;) due to the transitivity property of the trace 
function ( for every k dividing n, Tr"(a;) = TrJ(Tr^(a:))). 
Meanwhile, denote ci = Tr™(A“^(a^ v + av'^ + 

C2 = Tr™(A“^(a^™M + and C3 = 

Tr™(A“^(a^ r + ar"^ + ^^))- Then the sums Ai and 

A2 can be written as 

Ai [3 + (-1)"^ + (-1)“= 

- (_l)‘=l+=2+‘3] (12) 


and 

A 2 


1 
■ 4 

X 


(_2"*)(-l)Trr('^ 

[1 - (-l)=l+‘l - (-1) 


‘ + ^)+C3 

C 2 + i 2 _j_ /_ ^\Cl+C 2 -\-t-i-\-t 2 +t^ 


( 13 ) 


Firstly, we prove that / is bent when ti = t2 = = 0 . If 

ti = t2 = = 0, then 

1 TT7 / ^ 1 2^^ 1 

Ai =-(-2'")(-l)^i “ )[3 + (-l)"^+ (-l)== 


A 2 ^A” + 1)+C3 ^1 _ (_l)Ci _ 

+ (_1)C1+C3]^ 

When C3 = 0 , we can get 

Xf{a) = Ai + A2 = _2™(-l)T>-r(A-^A'"+i)_ 

When C3 = 1 , we can get 


Xf{a) = Ai +A2 

= i(_2™)(-l)Trr(A-^A'" + ^) [1 + (_1)C2 

_ (_l)'=l+'=3] 

_ f ifci=C 2 = l 

~\ - 2 ™(-l)T‘-r(A-'A"*+')^ otherwise. 

Hence, / is bent if Tr”(A“^u^™u) = Tr”(A“^r^™u) = 

Tr”(A“^r^ v) = 0. 

Secondly, we show that / is five-valued if at least one ti 
{i € {1,2,3}) is equal to 1. We only give the proof of the 
case of A = ^2 = 0 and ^3 = 1 since the others can be proven 
in a similar manner. In this case, (12) and (13) become 

Ai =i(-2'")(-l)'^5”(^"'“'”’^') [3 + (-1)"^ + (-1)“= 

+ (-1)"^+"=] 


and 

A 2 [1 - (-1)^1 - (-1)^^ 

When C3 = 0 , then we have 

Xf{a) = Ai + A2 = -2™(-l)T>-r(A-A=™+i)^ (14) 


When C 3 = 1, then we have 
X/(a) = Ai + A2 

1 m / 2”^ - 4-1 

= _(_ 2 ™)(-l)Tri (^ “ + )[l + (_l)ci+(_!)« 

+ (_1)C1+C3] 

_ 2 ™+l(-l)Trr(A“'A”‘ + i)^ ifCi=C 2=0 
0 , otherwise. 

(15) 

It then follows from (14) and (15) that / is five-valued and 
its Walsh spectrum is {0, ±2™, ±2”"+i}. 

Finally, we present the value distribution of the Walsh 
transform of five-valued function /. We only give the value 
distribution of / in the case of A = f 2 = 0 and ^3 = 1 since 
the value distribution of others can be determined in a similar 
manner. 

Let N 2 m (resp., A_ 2 m) denote the number of a € F 2 n 
such that x/(n) = 2™ (resp., —2"*). For convenience of 
presentation, we denote Tr™(A“^a^ by cq. The equality 
(14) implies that if C 3 = 0 and cq = Tr{"(A“^a^™“''^) = 1, 
then x/(q) = 2™. Hence we have 

N,r. = lj2 (i-(-ir)(i + (-ir) 

aEF 2 n 

aeFan 

X (1 -(- (_l)TrJ(A-A=™r)-|-Tr™(A-A=™ + L) 

= i[ 2 ” -b (- 1 )'^™!^”'’'"™^') (_l)Trr(A-iA’"r) 

aGF 2 TT' 

Tr™(A-i(a-rr)"“ + i)j 

aGF 2 " aGF 2 " 

= i [ 2 ” - 2(1 -b ( 2 ™ + 1) Y (- 1 )^”^^"'“^)] 

= 2’"-2 + 2^-^ 

where the fourth identity holds since raising elements of FJn 
to the power of 2 "* -b 1 is a 2 "* -b 1 -to-l mapping on to F^m. 
Similarly, it follows from (14) that 

= i E (i + (-ir)(i + (-ir) 

aGF 2 n 

= i A + 

a£F 2 Ti 

X (1 -I- (_;L)Tr"(A"A^"*r-)-|-Tr™(A-iA'" + L) 


- A - A (- 1 ) 



Let N2m+i (resp., N_2<n+i) denote the number of a € F2n 
such that x/(a) = 2 ™+^ (resp., —2”^+i). From ( 15 ), we know 
that if C3 = 1, Cl = C2 = 0 and cq = 1, then x/(fl) = 2"*+^. 
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Hence we have 

^2-+^ = E (1 - - (-ir^)(i + (-1)“) 

aGF2" 

x(i + (-iro 

= ^ E [i + (-ir + (-ir + (-ir+^^ 

aEF2n 

- (-1)^3 - (-1)^3+C1 _ (•_1)C3 + C2 _ (_2)C3+C2+Ci 
_ _ ^_]^^Co+Ci _ ^_]^^Co + C2 _ ^_^^Co+C2+Ci 

_j_ J^_]^^C0 + C3 _|_ ^_2^C0+C3+C1 _|_ J'_]^^C0 + C3+C2 
_j_ ^_2^^Co + C3+Ci+C2j 

On one hand, 

E (-1)" 


aGF2" 


aGF2Ti 


i') _ 


= 0 . 


a^F2T^ 

= 0 . 


(«+«)) 

aEF2T^ 


Since ts = 1, then 

'y ^ ^_2^O0+C2+Cl _ _ y ^ ^_^^Co+C2+Ci+i3 


aGF2n 


a£F2n 

= _ (_l)Trr(A-i(a+«+0=''" + ') 


aGF2n 


= 2 " 


yy (_1)C0+C3+C1+C2 ^ _ - E (-1) CO + C 3 +C 1 +C 2 +tl -\-t2-\-t3 
a£¥2‘n. oGF2n 

_ _ yy ^_2^^Tr™(A“^(a+r+ti+'!;)^'"+^) 
oGFan 
= 2™. 


Similarly, EaeF 2 n (-1)''' = EaGF 2 n (-1)'''’ = 0- 

Note that u, v, r are pairwise distinct and u -\- v + r ^ Q. 
Then we have 


Therefore we have 

iVam+i =y^[2” - (-2™) - (-2™) - (-2™) + (-2™) 

+ (- 2 '") + (- 2 '") + (- 2 "*) - (- 2 ™)] 

= J_2" = 2”“^. 

16 

Similarly, we have 

^- 2 ™+^ =]^ E (i + (-ir)(i-(-ir)(i + (-ir) 

aeF2^^ 

x(l + (-ir) 

=2"-^. 


Similarly, EaGF 2 . (-1)"^+"^ = EaGF 2 . 

EaGF2n(-ir^+^=+^^=0. 

On the other hand, 

a£F2Ti aEF2n- 

= i + ( 2 ™ + i) yy (-i)T'-r(A-":r:) 

= -2"". 



Clearly, the number of a S F 2 " such that x/(®) =0 is equal 
to 2" — 2”“^ — 2"“^. This completes the proof. □ 

It is easily checked that Tr"(A“^it^™u) = 

Tr"(A“^r^™u) = Tr"(A“^r^™u) = 0 when u,v,r £ F^m. 
From Theorem 1, we get the following corollary. 

Corollary 1: Let n = 2m be a positive even integer and 
A £ F^m. If u,v,r € F^m are three pairwise distinct elements 
such that tt + u + r ^ 0, then the Boolean function / 

fix) = Trf (Ax^^+i) +Tr^(ux)Tr”(ra)Tr^(rx) 


Similarly, 

L (-1)“ = i: i — l'i‘^0+C2 _ yy (^_]^^Co+C3 _ _2™ 

0GF2T1 aGF 2 Ti aGF 2 Ti. 

By the condition fi = ^2 = 0, we have 

yy j^^co+c3+ci _ yy ^■_2^co+c3+cl+tl 


aEF2 


a£F2 


= yy (_l)Trr(A-i(a+r+«) = 

aGF2n 
= - 2 ™ 


and 


E(-i) C0+C3+C2 _ ^ ^ ^_ 2 ^Co+C 3 +Ci +£2 

<tGF2 ^ ^l^F2t^ 

= yy (_l)Trr(A-i(a+r+^)""‘ + i) 

aGF2n 
= - 2 ™. 


is bent. 

Remark 1: \f r = v, the bent functions / presented 
in Theorem 1 become ones in [31, Theorem 9], i.e., if 
Tr"(A“^M^ v) = 0, then the Boolean function /(x) = 
Tr™(Aa;^™+^) + Tr"(Ma;)Tr"(ua;) is bent. 

Now let us consider the algebraic degree of / in Theorem 
1. Let i, j, fc £ {0,1, • • • , n — 1} are pairwise distinct integers. 
Denote the set of all permutations on i,j,k by V. It is clear 
that the possible cubic term in the expression of / has the 
form (F](i 2 fc)ep )x'^. If there exist three 

pairwise distinct integers i, j, k £ {0,1, • • • , n — 1} such that 
j k)ev 0, then the algebraic degree of / is 

3. 

Next we will show that if Tr"(A“^it^ v) = 
Tr"(A“^r^ u) = Tr"(A“^r^ v) = 0, the algebraic degree 
of / in Theorem 1 is not equal to 3 when m = 2. Otherwise, 
this will contradict the fact that the algebraic degree of a 
bent function / is at most n/2. Let Vi be the set of all all 
permutations on 0,1,3, 7^2 be the set of all all permutations 
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on 0,1, 2, 7^3 be the set of all all permutations on 1, 2, 3 and 
Vi be the set of all all permutations on 0, 2,3. The condition 
= Tr^(A“^r^^u) = Tr^(A“^M^^u) = 0 can be 

written as 

q2 q 3 q o2 c-\ c \3 

r V r V -\- rv + r v = 0 

< r'^ u + + ru^ + = 0 (16) 

q 2 q 3 q g 2 ry q 3 

+ uv + u"^x; = 0 . 

V 

Multiplying u, v and r to the first, the second and the third 
equation of (16) respectively yields 

{ <^2 q 3 o 92 9 93 

r uu + r V It + rv u + r u u = 0 

r'^^vu + vv? + rvu^^ + r'^vu^^ = 0 (17) 

q2 q 3 q o2 q q 3 

rit u + ru V + ruv + ru v = 1 ). 

- _ ryZ ryj r\k 

Adding three equations of (17) gives j k)^Vi ^ ^ ~ 

0. Similarly, multiplying and to the first, the 

second and the third equation of (16) respectively yields 
= 0. Multiplying v? , and to 
the first, the second and the third equation of (16) respectively 
yields j = 0 and multiplying 

and to the first, the second and the third equation of 
(16) respectively yields u^' = 0. Therefore, 

there are no cubic terms in the expression of / when m = 2 
, which implies that the algebraic degree of / in Theorem 1 
is equal to 2 . 

Remark 2: When m = 2, the algebraic degree of the bent 
function / in Theorem 1 is equal to 2. When m > 3, the 
bent functions / in Theorem 1 may be cubic according to our 
numerical results. 

Example 1: Let m = 3, F 26 be generated by the primitive 
polynomial + x + 1 and ^ be a primitive element 

of F 26 . Take A = 1, it = ^, u = and r = . Let V be the 

set of all permutations on 0,1,2. By help of a computer, we 
can get Tr 3 (u®u) = Tr 3 (r-®u) = Tr 3 (r®i;) = 0, u + v + r ^ 0, 

7 ^ 0 and the function f{x) = 
Tr 3 (x®)+Tr 3 (^a;)Tr 3 (,f®a;)Tr 3 (^^'^x) is a cubic bent function, 
which coincides with the results in Theorem 1. 

Example 2: Let m = 4, F 28 be generated by the primitive 
polynomial x® + a;^ + + 1 and ^ be a primitive 

element of F 28 . Take A = , u = v = r = 

Then the function / in Theorem 1 is f{x) = Tr 3 (^^^a;^^) + 
Tr®(^^°a;)Tr®(^®a;)Tr®(^®a;) . By help of a computer, we can 
get Tr®(it^®i;) = 1, Tr®(r^®ii) = Tr®(r^®ii) = 0. Moreover, 
the function is a five-valued and the distribution of the Walsh 
spectrum is 


' 0, 

occurs 96 times 

16, 

occurs 72 times 

-16, 

occurs 56 times 

32, 

occurs 16 times 

-32, 

occurs 16 times 


which is consistent with the results given in Theorem 1. 

As noted in Remark 1, if Tr"(A“^it^™i;) = 0, then the 
Boolean function f{x) = + Tj:i{ux)Tri{vx) 

is bent. In the following result, we will prove that if 
Tr 3 (A“^u^ v) = 1, the Boolean function f{x) = 


Tr™(Aa;^™“''^) + Tr"(iia;)Tr”(iia;) is semi-bent by using 
Lemma 1. 

Theorem 2: Let n = 2m be a positive even integer and 
u,v G F2,^. Define a Boolean function / on F2n by 

f{x) = Tr™(Aa;2"‘+i) + Tr^(ui)Tr^(i;a;), 

where A S F^m. If Tr”(A“^it^ v) = 1, then / is semi-bent. 
Moreover, when Tr"(A“^ii^”*u) = 1, if Tr"(A“^u^™“*'^) = 
1 or Tr"(A“^i;^ = 1, then / is a balanced semi-bent 

function. 

Proof: Let g{x) = Tr™(Aa;^ By Lemma 1 and (11), 
for each a G F^™, we have 

Xf{a) 

= 2 Ks(«) + Xg{a + v) + Xg{a + u)- Xg{a -b u -f u)] 

= \xg{a)[l + 


X 

(- 

_l)Trr 



_^^Trr(A-i( 

u+( 


- 

(- 

_l)Trr 

1 

10 

v-\-av^ 


u+au^ 


X 

(- 

_l)Trr 


v-\-uv'^ 

')) 



= 

1 

2 

Xs(a)[l + (- 

l)Trr(A- 

-If 2’^ I 2 

(o i;+ai? 

m 2”^ 

+V 

+^)) 

-b 

(- 

_l)Trr 


m, ^rr, 

u-\-au 




+ 

(- 

_i)Tvr 

(A-i(a"’ 

v-\-av^ 


n+an^ 



( 18 ) 


where the last identity holds because Tr"(A v) = 
Tr™(u^™u -b = 1. 

Denote ci = Tr™(A“^(a^""u -b -b and C 2 = 

Tr™((A“^(a^ u-bau^ +vf +^)). Then (18) can be written 
as 

X/(a) = i(-2™)(-l)^r(A-^<^^”‘+^)(i + (_i)ci + 

-b (-1)°^+'==] 

(_2™+l)(-l)Trr(A-'a='”+')^ if ^ = C2 = 0 
0, otherwise. 

It then follows from Definition 2 that / is semi-bent. Fur¬ 
thermore, from (18), if Tr"(A“^M^ v) = Tr™(A“^(M^ v -b 
uv'^ )) = 1 then the Walsh transform coefficient of the 
function / evaluated at 0 is equal to 

X/(0) = i(-2’")(l + (-l)^”(A-.^“+L 

It is easy to check that x/(0) = 0 if Tr™(A“^u^ = 1 or 

Tr™(A“^M^ = 1. Therefore, f{x) is a balanced semi-bent 

function. □ 

Remark 3 : For a given A € F^m , the number of semi¬ 
bent functions / in Theorem 2 is equal to i (1 — 

^ 2”“1(2” - 1). 
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B. New infinite families of bent, semi-bent and five-valued 
functions from Gold-like monomial function 

In [4], Carlet et.al proved that the Gold-like monomial 
function g{x) = Tr^^(Aa;^ over F 24 fc where k is at least 2 
and A € F* 4 fc, is self-dual or anti-self-dual bent if and only if 
A^-fA^^ ^ = 1 and A^ = 0. Recently, Mesnager 

showed that g(x) = Tr^^(Aa;^ over F 24 fc is self-dual bent 
when A-l-A^ = 1 in [31, Lemma 23], i.e., for each a G F* 4 fc, 
the Walsh coefficient x/(a) is 

when A -I- A^^*^ = 1. 

Lemma 2: Let fc > 1 be a positive integer and let A G F* 4 fc 
such that A -f A^ =1. Then the linearized polynomial 

cyk r\2k 

l{x) = Xx x^ 


is a permutation polynomial over F 24 fc. 

Proof: Firstly, we will prove that A -f A^ =1 implies 
that A ^ {x^ \ x G F 24 fc}. It follows from A-fA^^ = 1 that 

A-fA^ = 1, which leads to A^^ -|-A^ = 0, i.e., A^ = 1. If 
A = 0 ^*"+^ for some a G F* 4 fc, then (j( 2 ''-i-i)( 2 ^''-i) _ i since 
gcd(( 2 '= -f 1 )( 22 '= - 1),24'= - 1 ) = 2 ^'= - 1 , we know that 
= 1, i.e., a( 2 ''-i)( 2 '=+i) = = 1. Thus, A G F^, 

which is contradiction with A A- A^ =1. 

Secondly, we will show that l(x) is a permutation polyno¬ 
mial. Since / (x) is a linearized polynomial, we have to prove 
that the equation Ax-|-A^ =0 has the only solution x = 0 

in F 24 fc. Assume that /3 7 ^ 0 is a solution of Ax-fA^ x^ = 0. 
Then we have i.e.. 


It is easy to see that the left-hand side is a (2^ -f l)th power, 
while the right-hand side is not a (2^ A- l)th power because 
A ^ {x^ I X G F 24 fc}. This gives a contradiction. Thus, 
Ax A- A^ x^ is a permutation polynomial over A G F 24 fc 
when A A- A^^*" =1. □ 

Theorem 3: Let fc be a positive integer such that fc > 1 and 
let u,v,r be three pairwise distinct elements in G F* 4 fc such 
that u -\- V r 0. Let A G F* 4 j, such that A A- A^^ = 

1. If Tr^^(A(u^*'u A- {X{r‘^'’u A- rvf’’)) = 

Tr^^(A(r^ v A- rv^ )) = 0, then the Boolean function 

/(x) = Trf (Ax^'+i) -A Trf (Mx)Trf (ux)Trf (rx) 


over F24ib is a bent function. Otherwise, /(x) is a five¬ 
valued function. Moreover, if (Tr^^(A(r^ v A- rv^ ), 
Trj^'(A(r^^M A- rv?*")), {X{u^'° v A- uv^^))) G 

{( 0 , 0 , 1 ), ( 1 , 0 , 0 ), ( 0 , 1 , 0 ), ( 1 , 1 , 1 )}, when a runs through 
all elements in F 24 fc, the distribution of the Walsh spectrum 
of five-valued function / is given by 


Xf{a) = * 


0 , 

22k ^ 

2^2k-\-l 

_22/c+1 


occurs 2 ^^ — times 

occurs 2"^'"“^ A- 2^'"“^ times 
occurs 2 ^^“^ — 2 ^^“^ times 
occurs 2 ^^“^ times 
occurs 2 ^^“^ times. 


If (Tr 2 ^(A(x^*°u A- Trj^”(A(r^*'u A- rvf'‘)), 

Tri''(A(u2% -A uv‘^'‘))) G {(1,1,0), (1,0,1), (0,1,1)}, 
when a runs through all elements in ¥ 2 ^, the distribution of 
the Walsh spectrum of five-valued function / is given by 


Xf{a) = < 


0 , 

22k ^ 
_22k^ 
2^2k-\-l 
_ 2^2k-\-l 


occurs 2 ^^ — 2 ^'^“^ — times 

occurs 2 '*^“^ times 
occurs 2 ^^“^ times 
occurs -A 2^'"“^ times 

occurs 2^'"~'^ - 22'=-2 times. 


Proof: Let g{x) = Tr 2 ^(Ax^ We write 

Tr 2 ^(A(r^^x -A rw^^)) = ti, Trj^(A(r^*'u -A rvf'")) = t 2 , 
Tr^^(A(u^*'t; -A = ^ 3 . Denote ci = Tr^^(A(a^*'u -A 

-A C 2 = Trj^”(A(a^^u -A -A +^)) and 

C 3 = Tr^^(A(a^*^r -A ar^'‘ -A By analyses similar to 

those in Theorem 1, we have 


X/(«) = Ai -A A 2 , 


where 


_ ^_2]°l+°2+t3 j 


(19) 


and 


A 2 = -:22'=(-1)'^i Ao" 

^1^^ _ ^+ ^_ ^^C2+i2 _j_ ^ _^^Cl+C2+il+i2 + i3 j 

( 20 ) 


Similar to Theorem 1, we can prove that /(x) is bent if fi = 

t2 = ts = 0. 

Next we will prove that / is five-valued and determine its 
distribution of the Walsh transform in the case of fi = f 2 = 0 
and fa = 1 since the others can be proven in a similar manner. 
In this case, (19) and (20) become 

Ai =i 22 '=(-l)^i ''[3 + 

_A 

and 

A 2 = i22'=(-l)'^i''AA''+i)+c3 

4 ^ 

x[l- (- 1)^1 - (- 1 )^= - (- 1 )"!+"=]. 

When C 3 = 0, then we have 

Xf{a) = Ai + A 2 = 22fe(-l)T>'f (21) 


When C 3 = 1, then we have 


Xf{a) = Ai -A A 2 

= i22'=(-l)T^i'“AA'“+L ^1 (_j)C2 


^ I 22fc+i(-l)^i A“ ^ if Cl = C2 = 0 


( 22 ) 


I 0, otherwise. 

Thus, / is a five-valued function if fi = ^2 = 0 and fa = 1. 





Let Co = Let N 22 k (resp., N_ 22 k) denote 

the number of a S F 24 fc such that x/(a) = 2 ^^^ (resp., — 2 ^^). 
From (21), we know that x/(a) = 2^^ if C 3 = 0 and cq = 0. 
Then we have 

N22k=^ (i + (-ir)(i + (-ir) 

aGF24fe 

=7 E (1 + 


aEF24fc 




1 


=l[2"+ E (-1) 


Tr*'=(Aa^ +") 


gGFq. 


+ (_l)Trf (Ar^' + L ^ (a^''(Ar•+A=^^"'“)) 

a£F24fc 

+ (_;L)Trf(A(a+r)^'“ + i)j^ 


a&¥ 4k 


Note that A + =1 and r £ F* 4 fc. It then follows from 

Lemma 2 that Ar + A^ ^ 0 , which implies that 

Y (_l)Trf(a='“(Ar+A^V^''')) ^ 

a^F24fc 


Clearly, 






aeF„4fc 


^l£F„ 4 fc 


= X.( 0 ) = 2 ^'=. 


aeF24fc 

1 . -xTrf (Aa2''+i) 


=i E (i-(-i)’ 


a-GF„4fc 


fc ryk fy fc | 


(1 + (_l)Trr(^(«" r+ar^ +H +i))) 


_24Ai—2 _ (22k —1 


^2-+^ = !^ E (i + (-ir“)(i-(-ir)(i + (-ir) 

aeF24fc 

x(i + (-iro 


= 1 ^ E [i + (-ir + (-ir + (-i) 


C 1 +C 2 


aGF2n 


_ ^_1)^^ _ (_^)C3+Cl _ ^_2^^C3+C2 _ ^_2^^C3 + C2 +Ci 

-|_ _|_ ('_2)C0+Cl _j_ ^_2 ^^Co+C2 _|_ ^_2^^Co + C2+Ci 

_ ^_]^^Co+C3 _ J^^Co+C3+Ci _ J^^Co+C3+C2 

_ j^_]^^Co+C3+Ci+C2l 


Similar to above, we have 

E E E (-ir = o 


aeF, 


24k 


aGF„ 


aGF„ 


and 


^ (- 1 )^“ = ^ (-1)=0+C4 = ^ (_1)C0+C3 

fiGF2n a£F24fc a^F2n. 

= ^ (-1)=o+^3=2^(o) = 22^ 

aGF2r. 

Recalling that u, v, r are pairwise distinct and u + u + r ^ 0 
and by lemma 2 again, we have 

Y (-l)=i+^3 = (_l)Trf (A(«3'=+3+«3'=+1)) 
aGF24fc 

aeF24fc 

= 0 


and 


Tr4'‘(a3 (A(u+'!)+r)+A3 (u+v+r)^ )) 


Thus, N 22 k = 24'=-2 + Similarly, it follows from (21) 

that 

E (i-(-ir)(i + (-ir) 


'y ^_2)Ci+C2+C3 
(lGF24fc 

= (_l)Trf (A(^3 '=+i^^2'= + i^^2'= + 1)) 

X E (-1) 

aeF24fc 

= 0 

Similarly, EaGF 24 . = EaGF 24 . = 0- 

Since fi = <2 = 0, we have 

y ^ ^_]^^Co+C3+Ci _ y X j^^Co+C3+Ci+ii 

agF24fc oeF24fc 

= Y (_l)Trf (A(a+r+,;)3'' + i) 
aGF24fc 

= X.(0) = 2^'= 


Let N 22 k+i (resp., N_ 22 k+i) denote the number of a € F 24 fc 
such that x/(a) = 2^'"'+^ (resp., _22^+i). From (22), we know 
that if C 3 = 1 , Cl = C 2 = 0 and cq = 0 , then x/(q) = 2 ^'"'+^. 
Hence we have 


and 


'lCo+C3+C2+t2 


E = E (-1)' 

a£F24fc a€F24fc 

flGF24fc 

= UO) = 2"'^- 

Since ^3 = 1, then 

y |'_ 2 )Co+C 2 +Cl _ _ y ^ J^^Co+C2+Ci+i3 

aGF.,4fc aGFr,4A: 


= - E (-1) 

oeF24fc 

= -xM = -2^^= 


Trf (A(a+u+«)3 +i) 
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and 


2^¥^4k 


i-iy 


_ ^ ^ ^_^^CQ + C3+Ci+C2+il+t2+i3 

aG¥^4k 

_ 'y ' ^_2^^Tr™(A(a+r+u+D)^ +^) 


oeF, 


= -x,(0) = -2^^ 


IV. New infinite family of bent functions from the 
Niho Exponents 

The bent function 




5 = Trr(x^'"+') + Trr ^ 


(2^-1) i+l 


Then we have 

N^m+i =—2'^'^ = 2 ^'=-^ 

16 

Similarly, we have 

^-2-+^=^ E (i-(-ir)(i-(-ir)(i + (-ir) 

a£¥^4k 

x(l + (-ir) 

=24'=-4. 

Finally, the number of a G F 24 fc such that x/(a) = 0 is equal 
to 2 ^^= - 2 '^'=-! - 2'^'^-^. □ 

By analyses similar to those in Theorems 2, we get the 
following result. 

Theorem 4: Let fc be a positive integer such that k> 1 and 
let u,v € F^n. Assume that A G F* 4 fc such that A + = 1. 

Define a Boolean function as 

fix) = Trf (Ax^'+i) + Trf (ua;)Trf (ra) 

over F 24 fc. Then the following hold; 

1) If Tr^^(A(M^ V + uv^ )) = 0, then / is bent. 

2) If Tr^^'(A(u^^u + uv^'^)) = 1, then / is semi-bent. 

Moreover, if Tr^^”(AM^ = 1 or Tr 2 ^(Au^ = 1, then / 

is a balanced semi-bent function. 

Example 3: Let fc = 2, F 28 be generated by the primitive 
polynomial x^ +x^+ x^+ x'^ + 1 and ^ be a primitive element 
of F 28 . 

1) Let V be the set of all permutations on 0,1,2. If one 

takes A = u = v = and r = then by 

a Magma program, one can get A -f A^ =1, Tr®(A(u"‘u + 
uv^)) = Tr®(A(r-"‘it + ru'^)) = Trf(A( 7 ’"‘u + rv'^)) = 0 and 
S(i j k)ev 0- Computer experiment shows 

that 7(a;) = Tr^(^ 342 . 5 ) Tj.?('^ 2 i 22 ,)Xrf (C^°a;)Trf 

given by in Theorem 3 is a cubic bent function, which is 
consistent with the results given in Theorem 3. 

2) If one takes A = u = v = and r = 

then by a Magma program, one can get Tr®(A( 7 ’"‘u + rv'^)) = 
Tr®(A(r"‘it -I- rit^)) = 1 and Tr®(A(u^t; + uv'^)) = 0 
Computer experiment shows that /(x) = + 

given by in Theorem 3 is a 
five-valued function and its distribution of the Walsh spectrum 
is 


' 0, 

occurs 96 times 

16, 

occurs 64 times 

-16, 

occurs 64 times 

32, 

occurs 20 times 

-32, 

occurs 12 times 


This is compatible with the results given in Theorem 3. 


via 2^ Niho exponents was found by Leander and Kholosha 
[34], where gcd(A:, m) = 1. Take any a G F 2 " with a+a^ = 
1. It was shown in [35] that g is 

5 (x) =Tr™((a(l-I-a-I -) 

X (1-f a-f (23) 

Now using Lemma 1 and (23), we can present the following 
class of bent functions via 2^ Niho exponents. 

Theorem 5: Let n = 2m, fc be a positive with gcd(fc, m) = 
1 and u,v,r G F^m such that u-fu-l-r ^ 0. Then the Boolean 
function 


/(x) =Tr™(x2”+i)-f Tr” f ^ a;(2”‘-i)^+i 1 

-I- Tr"(itx)Tr"(r;x)Tr"(rx) 

is a bent function. 

Proof: Let 

/2'“-i-l 

g(x) = Tr™(x2'"+i)-f Tr” f ^ a;(2'"-i)^+i 
For each a G F 2 n, by Lemma 1, we have 

X/(a) = ^[^Xg{a) + Xg{a + v)+Xg{a + u)-Xg{a + u + v) 
+ Xgia + r) - Xg{a + r+ v) - Xg{a + r + u) 

+ Xg{a -I- r -I- M -I- u)] 

= Ai -I- A 2 , 



where 

Ai = ^[3X3(0) + Xg{a + + Xg{a + u) - Xg{a -f u -f u)] 

and 


A2 =2{Xg{a + r) -Xg{a + r + v) -Xg{a + r+ u) 

+ Xg{a + r + u + u)]. 

Set A = 1 -f a -f where a G F 2 n such that a -f = 1. 
It follows from (23) that 

Xg(a) = 

Now we compute Ai and A 2 respectively. Note that u,v,r G 
F^m. Then we have 
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^1 =^[3 + Xg(a + 'y) +Xs(a + M) -Xs(a + u + ^')] 

_^(aA+a^ +a^ -i)^ 

X [3 + (-l)T.r(»^-'<=‘-0 +(_l)Tt!“(»-*'''-‘-'') 

_ ,_j,T,r(.3-'»‘->)+T.r(..3''<"‘->), (24) 


polynomial in two variables over F 2 m. For a = ( 01 , 02 ), 6 = 
( 61 , 62 ) € F 2 n, the scalar product in F 2 n can be defined as 

((oi, 02 ), ( 61 , ^ 2 )) = + a 2 & 2 )- 

The well-known Maiorana-McFarland class of bent functions 
can be defined as follows. 

g(x,y) = Tr^(x7r(y)) + h{y), {x,y) G F 2 ™ x F 2 ™ 

where tt : F 2 ™ —>■ F 2 m is a permutation and fi is a Boolean 
function over F 2 m, and its dual is given by 


Similarly, we have 


g(a;,y) = Tr™(y7r '^{x))+h{T: ^(i)) 




where 7t~^ denotes the inverse mapping of the permutation 
TT [4]. This together with the definition of the dual function 
implies that for each a = (oi, 02 ) G F 2 n 

X 3 (oi, 02 ) = + (26) 


Let Cl = Tr™('(;x4^/(^*’ and C 2 = 

When = 0, by Eqs. (24) and (25) we have 

X/(o) = Ai + A 2 = 2 ™(_l)T>'r((«^+«^""'“+A"*)Ai/(='“-i>) ^ 

When Tr("= 1, by (24) and (25) again, we have 

X/(a) 

= Ai + A 2 
-b (-1)'=^ - (-1)^1+==] 

_2m(_i)Trr((aA-ra=""AA’")Ai/(='“-i))^ if Cl =1, 

C2 = 1 

2 m(_i)Trr((aA-ra"" " + A™)“D) ^ Otherwise. 


In what follows, by choosing suitable permutations tt, we 
will construct some new bent, semi-bent and five-valued func¬ 
tions from the class of Maiorana-McFarland. It is well known 
that the compositional inverse of a linearized permutation 
polynomial is also a linearized polynomial. The following two 
theorems will employ the linearized permutation polynomial 
over F 2 m to give new Boolean functions with few Walsh 
transform values. 

Theorem 6: Let n = 2m and u = (ui,U 2 ),v = 

{vi,V 2 ),r = (ri,r 2 ) are three pairwise distinct nonzero 
elements in F 2 m x F 2 m such that u + v + r ^ 0. Assume 
that TT is a linearized permutation polynomial over F 2 m. Let 
f{x,y) be the Boolean function given by 

f{x,y)=TTT{xn{y))+TTT{y) 

+ Tt’^{uix + U 2y)TT^{vix + C 2 y)Tr™(ria; -b r2y). 


Therefore, f{x) is a bent function. □ 

Remark 4: This result generalizes the case in [31, Theorem 
11] for r = u. It may be noted that we can not construct more 
bent functions for the case u,v,r ^ F^m according to our 
numerical results. 

Example 4: Let m = 4, k = 3 and F 28 be generated 
by the primitive polynomial x® -b -b -b -b 1 and 
^ be a primitive element of F 28 . If we take u = 

V = r = then by a Magma program, we can see that 
f{x) = Tr^(Ax^^) -b Tr^(x226) + Tr?(x^9®) -b Tr?(xi 6 ®) -b 
Tr®(^®^x)Tr®(^^’^x)Tr®(^®^x) given by in Theorem 5 is a 
bent function, which is consistent with the results given in 
Theorem 5. 

V. New infinite families of bent, semi-bent and 

FIVE-VALUED FUNCTIONS FROM THE CLASS OF 

Maiorana-McFarland 

In this section, we identify F 2 " (where n = 2m) with 
F 2 m X F 2 m and consider Boolean functions with bivariate 
representation f{x,y) = Tr™(P(x,y)), where P{x,y) is a 


If Tr™(r27r“^(?;i) -b 'y27r“^(ri)) = 0, Tr™(r27r“i(iti) -b 
M 27 r“^(ri)) = 0 and Tr™('U 27 r“^(ui) -b r' 27 r“^(ui)) = 0 , 
then f{x,y) is bent. Otherwise, f{x,y) is five-valued and 
the Walsh spectrum of f{x,y) is {0, ±2™, ±2™+^}. 
Moreover, if (Tr™(r' 27 r“^(ui) -b f 27 r“^(ri)), 
Tr™(r27r“^(ui) -b W27r“^(ri)), Tr™(u27r“i(ui) -b 

V27r-Hui))) e {(0,0,1),(1,0,0),(0,1,0),(1,1,1)}, 
when ( 01 , 02 ) runs through all elements in F 2 m x F 2 m, the 
distribution of the Walsh spectrum of five-valued function 
fix,y) is given by 


' 0 , 

occurs 2 ” - 2 ”-i - 2 "'-® times 

2 ™, 

occurs 2 "“^ -b 2 ™“^ times 

- 2 ™, 

occurs 2 ”“^ — 2 ™“^ times 


occurs 2 "“^ times 

_ 2^Tn-\-l 

occurs 2 "“^ times. 


If (Tr™(r27r“i(ui) -b U27r“i(ri)), Tr™(r27r“i(ui) -b 
W27r“^(ri)), Tr™(u27r“i(ui) -b V27r“i(ui))) G 

{( 1 , 1 , 0 ), ( 1 , 0 , 1 ), ( 0 , 1 , 1 )}, when ( 01 , 02 ) runs through 
all elements in F 2 m x F 2 m, the distribution of the Walsh 
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spectrum of five-valued function f{x, y) is given by 

times 


' 0 , 

occurs 2'^ - 2 "-i - 2"-3 ti 

2 "*, 

occurs 2 "“^ times 

- 2 ™, 

occurs 2 "“^ times 

2777+1 

occurs 2 ”“^ + 2 ™“^ times 


occurs 2 ”“^ — 2 ™“^ times. 


Proof: Let g{x,y) = Tr 7 “(a; 7 r(y)) -f Tr™(y). From (26), 
for each (oi, 02 ) G F 2 m x F 2 m, we get 

Xg(ai, 02 ) = (27) 

Applying Lemma 1 again, for each (oi, 02 ) G F 2 m x F 2 m, we 
have 


where 


X/(ai,a2) = Ai + A 2 , 


Ai =-[3x9(01,02) +X9(oi +t^l,02 -I-U2) 
+ X<?(oi + Ui,02 -f M 2 ) 

- X 9 (oi -f Ml + Ml, 02 -f M 2 -f M 2 )] 


and 


^2 =^[Xg(oi +^1,02 +r2) -Xgia-I + ri +Vi,a2 + r2 + V2) 
- Xg(oi -f Ml + Ml, 02 -f r 2 -f M 2 ) 

+ Xg(oi + Ml -I- Ml + Ml, 02 -f M 2 -I- M 2 -f M 2 )]. 

Note that 7 r“^ is a linearized polynomial. It then follows from 
(27) that 

Xg(oi -f Mi, 02 -f M 2 ) 

_2m(_i)Tr5"((o2-|-t;2)7r“'‘(ai+i'l))+Tr7‘(7r“^(ai+'!;i)) 

_2m ( _ 1 ) Tr™ (a2 7r “(ai))+Tr5" (tt “(ai)) 

^ ^^Tr™ (a 2 ■"■“^(«l)-l-i’ 271 -“^ (01 )-|-(t; 2 + ( 1 ) 1 )) 

=Xg(oi, 02 )(— 

Similarly, we can compute 

Xg(oi + Ml,a2 -f M 2 ) 

= Xg(ai, 02 ))— 

and 

Xg(oi + Ml + Ml, 02 -f M 2 -f M 2 ) 

_ 2 g(oi, 02)( —+ + 

^ ^_^'jTT:f{u2Tr~^{v-i)+V2'!T~^{u-i)) 

On the other hand, we can compute 

Xg(oi -f Ml + Ml, O 2 +r 2 + M 2 ) 

=Xg(oi -f ri,a 2 -f 7 - 2 ) 

^ j^^Tr7“(a2'7r“^(Di)+D2 7r“^(ai)-|-(n2 + l)7r“^(ni)) 

X ^_]^^Tr7‘(r-27'’“^('«l)+'«27r'^(»'l)) 


Similarly, we can compute the values of Xg(oi +mi +mi, 02 + 
r 2 -l-M 2 ) and Xg(oi+ri+Mi + Mi,a 2 -l-r 2 -|-M 2 -l-M 2 ) as follows 
respectively. 

Xg(oi + Ml + Ml, O 2 -f r2 -f M 2 ) 

=Xg(oi +^ 1,02 -|-r 2 ) 

X ^_]^^Tr™(a27r~'-(iii)+U2 7r“^(ai)-|-(ii2-|-l)'7r”'-('Ui)) 

^ ^_]^^Tr 5 "(r 2 ir“^(Ml)-|-« 2 ir“^(T-i)) 

and 

Xg(oi + Ml + Ml + Ml, 02 -f r 2 -f M 2 -f M 2 ) 

=Xg(ai +^ 1,02 -|-r 2 ) 

^ ^_2^^Tr™(a2 7r”'-(i;i)-|-j;2 7r”'‘(ai) + ('U2 + l)7r”'‘(i’i)) 

^ ^_^'jT^:f(a2^T~^{u-l)+U2^r~^{a^) + {u2 + l)^T~^(u^)) 

X (_X)'^r('’2’r~^(»'l)+^’27'’“^(i’l))+Tr7‘(r27r~^(ui)+'!i27r'^(ri)) 
^ ^_^'^'Trf{u2'7r~'‘-{vi)+V2Tr~^{ui)) 

Let Cl = Tr™(o 27 r“^(Mi) +M 27 r“^(ai) -I- (m 2 + l) 7 r“^(Mi)), 
C 2 = Tr 5 "(o 27 r“^(Mi) +M 27 r“^(oi) + (m 2 -I- l) 7 r“^(Mi)) and 
C 3 = Tr™(a 27 r“^(Mi)+M 27 r“^(ai) + (r 2 -l-l) 7 r“^(Mi)). Denote 
ti = Tr™(r-27r“i(Mi) -f M27r“^(Mi)), t2 = Tr™(r-27r“i(Mi) + 
M 27 r“^(ri)) and = Tr™(u 27 r“^(Mi)+M 27 r“^(ui)). Summa¬ 
rizing the discussion above, we can get 


Ai =- 2 '"( — 1 )’’’’'™^“^’^ ^(“i))-l-Trr(’^ ^(“ 1 )) [3 _|_ 


+ (- 1 )'=" - (-l)^i+=2+‘3j 


(28) 


and 


1 , 


A 2 = -2™( —(ai))+Trr(’^ (oi))+C3 

^1^]^ _ ^+ _ i'_ ^^C2+i2 _j_ ^_2^^Cl+C2+il+i2+i3 j 

(29) 

Similar as in Theorem 1, we can show that when fi = ^2 = 
fa = 0 and C 3 = 0 

^^( 01 , 02 ) = 2™(-l)^5"(“^"”'Ai))+TrrO-Lai)) 
and when ti = t 2 = ts = 0 and C 3 = 1 

X/(oi,02) 

I _ 2 ™( — l)Ti'r(“27r”Lai))+Trr(’^“^(“i))^ if Ci = C 2 = 1 
~ I 2 ™(—l)'^r(“ 27 r^^(ai))+TrT( 7 r”^(ai))^ Otherwise. 

Hence, f{x, y) is bent if fi = ^2 = fa = 0. 

Next we will prove that f{x, y) is five-valued and determine 
the distribution of its Walsh transform in the case of f i = f 2 = 
1 and fa = 0 and others can be proved by a similar manner. 
In this case, (28) and (29) become 

Ai =l2™(—[3 -I- (—1)'^^ 


-b (- 1 )'== - (- 1 )^ 1 +°=] 


and 


A 2 =- 2 "‘( — 1 )"^™^“^^ ^(ai))+Trr(^ ^(“i))-l-C3 
-b(-l)°= -b(-l)^i+^=]. 
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When C3 = 0 , we have 


and 


Xf{ai,a2) 

= Ai + A 2 

{ 2m+l|'_i^Tr™(a27i-“^(ai))+Tr™(7i-“^(ai))^ jf _ q 

0, if Cl = C2 = 1 

2 m(_i)Tr™(a277-i(ai))+Tr™(77-i(ai))^ Otherwise. 

(30) 

When C 3 = 1, we have 

X/(ai,a 2 ) 

= Ai + A 2 

_ j}_2m|'_2^Tr5"(a2'n-“^(oi))+Tr5"(7r“^(ai)) _ ^_ 2 ^^ci+C 2 j 

0, if Cl = C2 = 1 

or Cl = C 2 = 0 

2 ^^—1)"^! (^i 27 r (oi))+Tr^ (tt (c^i)) Otherwise 

(31) 

Combing (30) and (31), we conclude that f{x, y) is five-valued 
and the Walsh spectrum of f(x,y) is {0, ±2™, ±2™+^}. 

Let Co = Tr™(a 27 r“^(ai)) -I-Tr™( 7 r“^(ai)) and denote by 
Ni the number of (oi, 02 ) € F 2 m xF 2 m such that 0 , 2 ) = 

2"^i, where z = 0 , 1 , — 1 , 2 , 2 . 

Firstly, we compute N 2 m and iV_ 2 m. From (30) and (31), 
we have 

N2r. E (1 + (-ir)(i + - (-1)^^) 

ap ,02 

+ F E (1 + (-i)“°)(i - (-ir)(i + (-ID 


01 , 02 ^^ 2 ''^ 01 , 02 ^^ 2 ^ 

= X5(0) = 2 '". 


Since tt is linearized permutation polynomial over F2m and 
^3 = 0, we have 

'y ' ^_-^'jC0+Cl+C2 _ y ^_2^^C0-|-Cl+C2-|-t3 

01 , 02 ^^ 2 ^ ai,a 2 €F 2 ’^ 

_ 'y ^ ^_]^^Tr^((a2+i'2+'ii2)7r“^(ai+L)i+ui)) 

ap ,02 £F2^ 

= X§(0) = 2-. 


Op ,0-2GF2m 

_ ^_2^^Tr7*(a27r“^(tii)+t)27i-“^(oi) + (D2 + l)7r”'-(«i)) 

Op ,02GF2”^ 

^ (a27r“'-(«i)+U27r“'-(ai)-|-(«2 + l)7r“^(’il)) 

_^_2^^Tr7‘((«2 + l)7r”'‘(’)l)-l-(n2 + l)7r”L“i)) 

X ^ (_X)Trr(^“Hai)('«2+U2)) 

Op £F2^ 

X ^ ^_2^^Tr™(a27r-L“i+i’i)) 

O 2 ^F2tTl, 


=0 


( 34 ) 


where the last identity holds since {ui,U2) 7^ (ui,U2) implies 
that either ui -f ui 7^ 0 or U2 + U2 7^ 0 . Based on the analysis 
above, we have N2m = 2 "“^. Similarly, we can get N-2^ = 

2 n- 2 ^ 

Secondly, we compute N2m+i and N_2m+i. It follows from 
( 30 ) that 


8 

Op,02Gll:'2’^ 

=i E (i + (-iD(i-(-iD^^) 

op ,02 EF2”T' 

=i[2"- E (-ir+^^+ E (-1)'“ 

op ,02GF2^ Op ,a2GF2^ 

_ y ^ ^_]^^Co+Ci+C2j 

op ?02 GF2m 

For V (— 1 )'^°, we have 

^op,a2€ll?2”^ ' ^ 

(_X)Tr™(a27r-Loi))-|-Tr”(7i--Loi)) 

( 32 ) 


^2“+^=!^ E (i + (-iD(i + (-iD(i + (-iD 

op , 02 GF 2 tTi 

x(i + (-iD 

= 1^ E [i + (-D + (-D + (-ir+^= 

ai ,a2GF2Tn 

_|_ -(- (_p)'=3 + Cl _j_ ^_iy3+C2 _|_ ^_]^^C3-|-C2+C1 

_|_ (_p)°0 _|_ ^_2)C0+Cl _j_ ^_2)C0-|-C2 _|_ ^_J^^Co-|-C2+Cl 
_j_ ^_2)°0+C3 _j_ J’_2 ^^Co-|-C3+Ci _|_ ^_2^Co-|-C3+C2 
_j_ ^_2^O0+C3-|-Cl+C2j 

Note that u, v, r are pairwise distinct. Similar to (34), we have 

E (-D= E (-D= E (-ir = o 

0p,02GF2’Ti Qp,a2£F2’Ti Op,Q2^F2^ 

and 

E = E 

0p,02GF2Tn 0 i,02^J^2’^ 

= E (- 1 )“"+^" = 0 . 

op ,02 GF 2 m 

Since u -f u -I- r 7 ^ 0 implies that either mi -f ci -I- ri 7 ^ 0 or 
M 2 + + ’’a 7 ^ 0 , we have 

y ^ ^_2^C1-|-C2-|-C3 

op , 02 GF 2 ’ti 

= ^_p)'rrr(('“2-l-l)7r”'‘('«l)-|-(ii2-|-l)7r“’‘('!ii)-|-(7'2-|-l)7r"'-(T-i)) 

X ^_2^^Tr™(7r“^(ai)(t;2-l-«2-l-i-2)) 

Op GF2 ’Ti 

X y ^ j'_2^^Tr™(a27r”'-(ui-|-j;i-|-ri)) 

O 2 £F2m 


(33) 


=0. 
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Similar to (32), we can get 

^ ^ ^ (_ 1 )C 0 +C. 

®15®2^I^2”^ < 2 l,< 22 ^^ 2 ^ 

= ^ (-1)^°+=3=^.(0)=2™. 

ai ,02 ^^ 2 ”^ 

Similar to (33), since ti = t 2 = 1, we have 


'y j'_]^^Co+C3 + Cl _ _ y ^ ^_2^^Co+C3 + Cl+ti 

Ol , 02 ^^ 2 ^, 0 i, 02 GF 2 ”^ 

_ _ y ^ J’_]^^Tr7*((a2+r2+i>2)-n'“^(ai+ri+'!;i)) 

Oi ,02^F2’m, 

X ^_]^^Tr™(7r“3(Q,+ri+i,i)) 

= -xg( 0 ) = - 2 - 


and 


y ^ ^_2^^Co+C3+C2 _ _ y ^ ^_]^^Co+C3+C2+t2 

0 i, 02 GF 2 ’n 0 i, 02 GF 2 ’Ti 

_ _ y ^ ^_]^^Tr5"((a2+r2+«2)7r“'‘(ai+i’i+«i)) 

0,1 ,02GF2^ 

= -Xg( 0 ) = - 2 ™. 


If Tr™(M 27 r ^(rii) + t; 27 r ^(rti)) = 0, then / is bent. Other¬ 
wise, / is semi-bent. 

Proof: The proof is similar to Theorem 2 and we omit it 
here. □ 

Remark 5: To obtain our constructions in Theorems 6 and 
7, we need to determine the compositional inverse of a given 
linearized permutation polynomial over F 2 m. Information on 
the compositional inverses of certain linearized permutation 
polynomials could be found in [36], [37], [38]. Clearly, the 
simplest suitable linearized permutation polynomial tt over 
F 2 m in Theorems 6 and 7 is where 0 < fc < n — 1. 

Theorem 8: Let n = 2m and s be a divisor of m with — is 

S 

odd. Assume that u = (mi,M 2 ),v = {vi,V 2 ) are two distinct 
nonzero elements in F 2 « x F 23 such that uir ;2 -I-U 1 U 2 = 0. Let 
f{x,y) be the Boolean function given by 

/(x, y) = Tr™(xy‘') -f Tr™(uix -f U 22 /)Tr™(uix -f V 2 y) 

where <7(2®-fl) = 1 (mod 2 ™ — 1 ). If Tr^{ulv 2 +U 2 vf) = 0 , 
then f{x,y) is bent. Otherwise, f{x,y) is semi-bent. 

Proof: Let 7 r(w) = y‘^ and g(x,y) = TrfixTriy)). Since 
d(2® -b 1) = 1 (mod2™ - 1), then TT-^{y) = y'^‘+^. This 
together with (26) implies that for each a = ( 01 , 02 ) G F 2 " 


By fi = ^2 = 1 and ts = 0 , we have 

y ^ ^_2^^Co-|-C3-|-Ci-|-C2 

ai,<l2^F2m 

_ ^ ^ ^ J^^Co+C3+Ci+C2+tl+i2+i3 

ai ,a2 £F2^ 

_ y ( j'_j^^Tr™((a2+r2+'y2-l-'U2)7r~L“i+’’i+-l-’'i+“i)) 

ai ,a2 ^F2Tn 
=Xs(0)=2™. 

Based on the discussions above, we can get 

N^^+i =—(2" -b 2™+2) = 2"“'‘ -b 2”""^ 

16 

Similarly, we have 

X (l + (-l)^^) 

_ e^n—A _ 


□ 

It should be noted that two of u,v,r G F^n can be equal. 
Without loss of generality, we assume that r = v, then the 
following result can be obtained. 

Theorem 7: Let n = 2m and u = (iti, U 2 ),v = (yi, V 2 ) are 
two distinct nonzero elements in F 2 m x F 2 m. Assume that tt 
is a linearized permutation polynomial of F 2 m. Let f{x, y) be 
the Boolean function given by 

f{x,y) =TrT{xn{y))+TrT{y) 

+ Tr™(uix + ■02t/)Tr™(uiX + V2y). 


X 5 (ai,a 2 ) = 2”^(-1)^”(“=“3“^'). (35) 

According to Lemma 1, for each ( 01 , 02 ) G F 2 n, we have 
X/(ai,a 2 ) 

= 2^Xg{ai,a2) + Xg{ai +ui ,02 + ^ 2 ) 

+ X!?(«l + Ml, 02 + M2) - X5(oi + Xi + 01,02 + 02 + 02)]- 

Now we compute Xs(mi +^ 1,02 + 02 ), Xs(mi + mi, 02 + 02 ) 
and Xg(oi + oi + ui ,02 + 02 + 02 ) respectively. By (35), we 
have 


Xg{ai + 01,02 + 02 ) 

_ 2 ™(_ 2 ^)Tr™((a 2 -|-J, 2 )(ai-|-t,i)^ 

_ 2 m {azaf ^^)+TT’f {a2af vi+a2aivl'‘ +a2V^'‘ 

X viV2+aivl V2+v^ 

= Xs( 0 l, 

X |'_1+^U2-|-a3‘‘nii,2-|-aii,i'U2+i’ii;2) 


) 


(36) 


where the last identity holds since v = ( 01 , 02 ) is a nonzero 
element in F 2 S x F 23 . 

Similarly, we can show that 


Xg(oi +01,02 +O 2 ) 

= Xg(0l, 02)(-l)^”(“=“i‘’“i+“"“^“i+“""i) 
X /'_1'|Tr7*(a^ '^^U2+al uiii2-|-aiUiU2+ii?M2) 


(37) 
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and 


Xg{ai + + Ml, 02 +V 2 + U 2 ) 

= Xg(ai, 

^ j'_j^^Tr7‘(a^ *'^V2+a1‘ ViV2+aiViV2+vlv2) 
j'_j^^Tr5"(a2a? ui+a2aiui+a2uf) 

X ( —l)“i '^^'‘^2+al uiu2+aiuiu2+ufu2) 

X ^_l)'^r*((“l +ai)(uiV2+VlU2)+U^V2+V^U2) 


(38) 


Let Cl = Tr™(a 2 a^*'!;i+a 2 aiWi+a 2 Mj+aj ■'■^t; 2 +af‘’wiz; 2 + 
ait;it ;2 + vfv 2 ) and C 2 = Tr™(a 2 af ui + a 2 aiui + a 2 u\ + 
a\ '^^U2 + of U1U2 + aiUiU2 + u\u2)- 
Note that M 1 V 2 + M 1 M 2 = 0. If Tr™(M^C 2 + M 2 M 1 ) = 0, 
combing (36), (37) and (38), we get 

Xf{aua2) =i 2 ™(-l)T'-r(« 2 ar+^)[l + (_i)-i 
+ (-1)=^ - (-1)"^+^=] 

_ f _ 2 '"(-l)Trr(« 2 af + i)^ ifCi=C2 = l 

I 2 ™(—otherwise. 

If Tt'^{u\v 2 + U 2 M 1 ) = 1, then 

X/(ai, 02 ) + (- 1 )=^ 

+ (-1)^=^ + (-1)^1+'=^] 

2™+l(-l)'t^r(a2af + l)^ ifCi=C2 = 0 
I 0 , otherwise. 

The desired conclusion follows from the definitions of bent 
and semi-bent function. □ 

Example 5: Let m = 9, s = 3 and F 29 be generated by the 
primitive polynomial a;® + + 1 and ^ be a primitive element 

of F 29 . 

1) Take u = (ui,U 2 ) = and v = (wi,U 2 ) = 

1). Clearly, U 1 V 2 + U 2 V 1 = 0 and 284 x (2^ -|- 1) = 
l(mod 512). By help of a computer, we can get Tr®(ttiz ;2 + 
U 2 vf) = 0 and the function f{x) = Tr®(xt/^®^)+ Tr®(^^^®x + 
^^^?/)Tr®(^^'^®x + y) is a bent function over F 29 x F 29 , which 
is consistent with the results given in Theorem 8; 

2) Take u = (mi,U 2 ) = and v = (ui,U 2 ) = 

(^’^^,1). Clearly, U 1 V 2 + M 2 M 1 = 0 and 284 x (2^ -|- 1) = 
l(mod 512). By help of a computer, we can get Tr®(uiU 2 + 
U 2 v\) = 1 and the function f(x) = Tr®(xt/^®^)+ Tr®(^^'^®x + 
^^^?/)Tr®(^^^x+j/) is semi-bent function over F 29 XF 29 , which 
is consistent with the results given in Theorem 8. 


VI. Conclusion 

Several new classes of Boolean functions with few Walsh 
transform values, including bent, semi-bent and five-valued 
functions are provided, and the distribution of the Walsh 
spectrum of five-valued functions presented in this paper are 
also completely determined. As a generalization of the result 
[ 31 ], we obtained not only bent functions but also semi¬ 
bent and five-valued functions from a different approach. 
Furthermore, some cubic bent functions can be given by using 
our approach. It should be noted that some results presented 


in this paper can be generalized to fields Fp,i where p is an 
odd prime and another paper included the mentioned results 
has been submitted. 
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